Skip to content
OpenAdvisories

Package · Maven

com.cronutils:cron-utils

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 10.0
    CVE-2021-41269 Public exploit

    Unauthenticated remote code injection in cron-utils

    cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, lead…

    jmrozanec cron-utils com.cronutils:cron-utils Maven
  • High 7.9
    CVE-2020-26238

    Critical vulnerability found in cron-utils

    Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them. In cron-utils before version 9.1.3, a template Injection vulnerability is present. This enables attackers to inject arbitrary Java EL expressio…

    jmrozanec cron-utils com.cronutils:cron-utils Maven